CVE-2005-3268 in yiff server

सारांश

द्वारा VulDB • 03/06/2026

yiff server (yiff-server) 2.14.2 on Debian GNU/Linux runs as root and does not properly verify ownership of files that it opens which allows local users to read arbitrary files.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• आरक्षित करना: 20/10/2005
• प्रकटीकरण: 20/10/2005
• संयम: स्वीकृत
• प्रविष्टि: VDB-26609
• CPE: तैयार
• CWE: CWE-200 (अपुष्ट)
• CVSS: 4.0 (VulDB)
• EPSS: 0.00396
• KEV: नहीं
• गतिविधियाँ: बहुत कम

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2005-3268
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2005-3268
• CVE Details: https://www.cvedetails.com/cve/CVE-2005-3268/